CSP (Content Security Policy) and Squirrelmail

There is a new method for providing an extra layer of security against
XSS, which uses a set of HTTP headers to provide content restrictions
and policy directives.

http://people.mozilla.com/~bsterne/content-security-policy/index.html
https://wiki.mozilla.org/Security/CSP/Design_Considerations
https://dvcs.w3.org/hg/content-security-policy/raw-file/tip/csp-specification.dev.html

For something like this to apply in squirrelmail, there is a need for
inline javascripts to be moved away from HTML pages and into separate
javascript-only files.

In my opinion it is worth the effort.

-- 
Alexandros Vellis
National & Kapodistrian University of Athens
Network Operations Centre

------------------------------------------------------------------------------
Special Offer -- Download ArcSight Logger for FREE!
Finally, a world-class log management solution at an even better 
price-free! And you'll get a free "Love Thy Logs" t-shirt when you
download Logger. Secure your free ArcSight Logger TODAY!
http://p.sf.net/sfu/arcsisghtdev2dev
-----
squirrelmail-devel mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.devel
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-devel